{"id":19810,"date":"2022-08-10T05:20:52","date_gmt":"2022-08-10T13:20:52","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2022\/08\/10\/news-13543\/"},"modified":"2022-08-10T05:20:52","modified_gmt":"2022-08-10T13:20:52","slug":"news-13543","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2022\/08\/10\/news-13543\/","title":{"rendered":"Microsoft squares away 121-CVE Patch Tuesday for August"},"content":{"rendered":"

Credit to Author: Angela Gunn| Date: Wed, 10 Aug 2022 12:31:41 +0000<\/strong><\/p>\n

\n

Microsoft on Tuesday released patches for 121 vulnerabilities in eight Microsoft product families. This includes 16 Critical-class issues affecting Azure, Exchange, and Windows. Once again the majority of CVEs affect Windows; the operating system takes the lion\u2019s share of the CVEs with 61, followed by 44 for Azure. Three of the included Important-severity patches address boot-loader issues in non-Microsoft products and were apparently helmed not by Microsoft but by CERT\/CC, as occasionally happens when one vulnerability affects multiple vendors. Two CVEs involving Windows Digital Media Receiver affect not only Windows but multiple digital formats.<\/p>\n

One vulnerability, CVE-2022-30134, has been publicly disclosed. That elevation-of-privilege issue affects Exchange Server (versions 2013, 2016, and 2019), but would require the attacker to entice a victim to visit a specially crafted server share or website \u2013 a sufficiently high bar that Microsoft claims exploitation is unlikely.<\/p>\n

Follina and Friends<\/strong><\/p>\n

One Important-class Remote Code Execution issue, affecting Microsoft Windows\u2019 Remote Diagnostic Tool (MSDT), is currently under active exploit in the wild. The “DogWalk” issue, CVE-2022-34713, is closely related to the Follina<\/a> issue (CVE-2022-30190) that burst onto the scene in late May. The previous CVE was quietly<\/a> patched in June, and a defense-in-depth update was issued in July.<\/p>\n

The MSDT issue covered in CVE-2022-34713 is actually older than the Follina variant; it was first reported to Microsoft in December 2019 by researcher Imre Rad. At that time, Microsoft\u2019s investigation identified it to Rad as not being a security issue, at which point Rad disclosed<\/a> his findings to the general public. Microsoft reassessed the bug and informed Rad on August 4 of this year that it is, in fact, a security issue. With interest and activity high around the matter, we recommend that administrators prioritize this CVE this month.<\/p>\n

By the Numbers<\/strong><\/p>\n